Amazon Technologies, Inc.

Correct Computation, Inc.

Ian Nicholas Sweet

Neha Rungta

John Byron Cook

Carsten Varming

Andrew Jude Gacek

Pauline Virginie Bolignano

Cole Nathan Schlesinger

Michael W Hicks

Kasper Soe Luckow

Anwar Mamat

B S Lavender

A policy auditing service can be implemented, in accordance with at least one embodiment that obtains a set of parameters that indicates a snapshot of a policy configuration for an account, a query, and a security policy. The security policy may encode a security requirement or invariant. The policy auditing system may determine states that can be reached via mutative operations (e.g., role assumption) and use a policy analyzer service to determine whether assuming a role results in a grant of access that is at least as permissive as the security policy of the set of parameters.

Techniques for analyzing security in computing environments with privilege escalation

In one embodiment, an application programming interface (API) and machine code associated with a software library are accessed. Data sources and data sinks in the software library are identified based on the API, and a data flow among the data sources and data sinks is determined based on a dynamic analysis of the machine code associated with the software library. A flow graph associated with the software library is then generated to represent the data flow among the data sources and data sinks, and a source code model associated with the software library is generated based on the flow graph.

Automated generation of source code models from machine code for code analysis

Growing community of inventors

College Park, MD, United States of America

Ian Nicholas Sweet